A police officer asks you to unlock your phone.

The request sounds simple. But inside that device are years of private conversations—messages to your spouse, your lawyer, your doctor, your employer, and your closest friends. An FIR has been registered. The investigation has begun. The officer wants access to your WhatsApp chats.

Most people assume they have only two choices: comply or risk getting into trouble.

The law is far more complicated.

Whether the police can access your WhatsApp chats involves three separate legal questions: whether they can seize your phone, whether they can compel you to unlock it, and whether any chats extracted from it can actually be used as evidence in court. The answer to each question is different, and the difference can determine the outcome of an entire criminal case.

This distinction has become increasingly important in an era where entire criminal investigations can revolve around a smartphone. While digital evidence is now central to modern policing, constitutional protections relating to privacy, self-incrimination, and fair trial rights continue to apply with full force.

Before answering whether the police can read your WhatsApp chats, it is important to understand that the law does not treat a mobile phone as a single issue. Every investigation involving a phone passes through three distinct stages, and each stage is governed by different constitutional and statutory principles.

Quick Answer

Yes, the police may lawfully seize a mobile phone during an investigation in appropriate circumstances. Whether they can compel a person to unlock the device, however, remains a legally disputed question. Even where WhatsApp chats are obtained, they are not automatically admissible in court. Their use as evidence depends upon compliance with constitutional protections, procedural safeguards, and the legal requirements governing electronic evidence under Indian law. To understand why, it is important to recognise that the law does not treat a mobile phone as a single issue. Every investigation involving a phone typically raises three separate legal questions, each governed by different constitutional and statutory principles.

The Three Legal Questions Hidden Inside One Phone

When someone asks, “Can the police read my WhatsApp chats?”, they are actually asking three separate questions:

1. Can the police seize the phone?

2. Can the police compel the owner to unlock it?

3. Can WhatsApp chats extracted from the device be used as evidence in court?

The first question concerns search and seizure powers under criminal procedure law and the constitutional right to privacy under Article 21^[7].

The second concerns protection against self-incrimination under Article 20(3)^[8] of the Constitution.

The third concerns admissibility of electronic evidence under the law of evidence, including Section 65B of the Indian Evidence Act, 1872^[9] and the corresponding provisions now contained in Section 63 of the Bharatiya Sakshya Adhiniyam, 2023^[10].

Each issue must be analysed separately.

Can the Police Seize Your Phone During an Investigation?

The power most frequently relied upon by investigating agencies to obtain documents, records, devices, or other material relevant to an investigation was contained in Section 91 of the Code of Criminal Procedure, 1973^[11]. The corresponding provision is now Section 94 of the Bharatiya Nagarik Suraksha Sanhita, 2023 (BNSS)^[12].

Broadly speaking, both provisions empower a court or an investigating officer to require production of any document or thing considered necessary or desirable for the purposes of an investigation, inquiry, or trial.

At first glance, these provisions appear broad enough to cover mobile phones, electronic records, and other digital material. Courts have indeed permitted production of call detail records, electronic records, and similar information where such material is held by third parties.

However, an important constitutional distinction emerges when the material sought belongs to the accused person themselves.

In practice, this distinction matters enormously.

A telecom company can often be directed to produce records in its possession. A witness may be required to produce relevant documents. But when investigators seek access to an accused person's own phone in order to discover potentially incriminating material, constitutional protections begin to assume far greater significance.

Several High Courts have expressed the view that provisions such as Section 91 CrPC (now Section 94 BNSS) should not ordinarily be used to compel an accused person to produce material that may be self-incriminatory, particularly where such compulsion would undermine constitutional protections available to the accused. The reasoning reflects a long-standing judicial concern that criminal procedure should not be used to circumvent the safeguards guaranteed to individuals facing criminal prosecution.

The practical implication is significant. A request directed at a third party stands on a very different legal footing from a request directed at an accused person's own device.

Put simply, the law generally treats records held by third parties differently from material stored on an accused person's own phone. Once investigators seek access to the accused's device itself, questions of privacy, self-incrimination, and constitutional safeguards become substantially more important.

These concerns become even more pronounced where investigators seek access not merely to the device, but to passwords, passcodes, biometric authentication, or other means of unlocking it.

Privacy and Search of Digital Devices

Even where investigators possess statutory powers to obtain documents or seize material relevant to an investigation, those powers are not unlimited.

The right to privacy is now recognised as a fundamental right under Articles 14, 19 and 21 of the Constitution of India. In Justice K.S. Puttaswamy (Retd.) v. Union of India^[17], the Supreme Court emphasised that restrictions upon privacy must satisfy constitutional standards of legality, necessity and proportionality. Consequently, searches and seizures involving personal digital devices must be conducted strictly in accordance with law and with due regard to individual liberty and privacy.

Historically, privacy concerns were often associated with homes, offices, and physical possessions. In the digital age, however, a smartphone may contain an extraordinarily detailed record of a person's life, including private conversations, photographs, financial information, medical data, location history, internet activity, professional communications, and personal relationships.

For that reason, courts have increasingly recognised that access to digital devices raises privacy concerns of a different order. A search of a mobile phone is often capable of revealing far more personal information than many traditional physical searches.

Indian courts have therefore stressed the importance of procedural safeguards when investigating agencies seek access to electronic devices. Constitutional challenges have frequently arisen in cases involving the seizure and examination of mobile phones, laptops, and other digital storage devices, particularly where questions are raised regarding the legality, scope, or manner of the search.

Recognising the growing importance of these issues, the Supreme Court in 2023 called upon the Union Government to consider a framework governing the search and seizure of digital devices. The Court noted concerns regarding the absence of comprehensive guidelines regulating how electronic devices may be searched, copied, retained, examined, and ultimately returned.

Until a more comprehensive framework emerges, disputes concerning digital searches continue to be assessed through a combination of constitutional principles, statutory safeguards, and evolving judicial precedent. As a result, questions of privacy often remain central whenever investigators seek access to the contents of a person's phone or other digital device.

Can the Police Force You to Unlock Your Phone?

Seizing a phone is one thing.

Accessing what is inside it is another.

A modern smartphone is often more revealing than a house search. It may contain years of conversations, photographs, internet activity, location history, financial information, professional communications, and details of personal relationships.

The question therefore becomes deceptively simple:

Can the State require you to unlock it?

This remains one of the most unsettled and actively debated issues in Indian criminal procedure.

Unlike many other areas of criminal law, there is presently no definitive Supreme Court ruling directly settling whether an accused person can be compelled to disclose a password, passcode, PIN, pattern lock, or biometric credential to unlock a digital device.

As a result, courts and commentators have approached the issue from competing constitutional perspectives.

One View: Unlocking a Device May Not Amount to Testimonial Compulsion

One line of reasoning is that providing access to a device does not necessarily amount to giving evidence against oneself. According to this approach, the accused is not making a statement or confession but is merely facilitating access to material that already exists.

This view draws support from the distinction recognised in constitutional jurisprudence between compelled testimony and the collection of physical evidence.

The Contrary View: Password Disclosure May Be Protected by Article 20(3)

The competing argument is that a password exists in the mind of the individual and can be disclosed only through the use of personal knowledge. Compelling a person to reveal that knowledge may therefore amount to testimonial compulsion and attract protection under Article 20(3) of the Constitution.

This reasoning draws support from broader constitutional principles discussed in landmark decisions such as State of Bombay v. Kathi Kalu Oghad^[2] and Selvi v. State of Karnataka^[3]. In Kathi Kalu Oghad, the Supreme Court drew a distinction between compelled testimony and the collection of physical evidence. In Selvi, the Court emphasised that Article 20(3) protects individuals against compelled disclosure of personal knowledge that may have a testimonial character. Although neither decision directly addressed mobile phone passwords or digital devices, their constitutional reasoning continues to inform contemporary debates regarding compelled disclosure of passwords, passcodes, biometric credentials, and other means of accessing electronic devices.

Further, in Miss B. Rajini v. Pakala Satyanarayana Rao (2024)^[4], the Telangana High Court dealt with a request concerning access to an accused person's mobile phone for forensic purposes. The decision reflects the continuing judicial concern that investigative measures involving personal digital devices must be balanced against constitutional protections available to an accused person, including the protection against self-incrimination.

What Does This Mean in Practice?

The legal position remains unsettled.

A person asked to unlock a device is not dealing with a question that has been conclusively resolved across all jurisdictions and factual situations. The answer may depend upon the nature of the demand, the manner in which access is sought, the facts of the case, and the constitutional arguments advanced before the court.

For that reason, it is unwise to assume either that compliance is always mandatory or that refusal is always legally protected. Where such a demand is made, obtaining legal advice at the earliest stage is often essential.

WhatsApp Chats and the Biggest Mistake Made in Court

Even if a phone is lawfully seized and lawfully accessed, another question remains:

Can the chats actually be used as evidence?

Most people assume the answer is obvious.

Imagine a courtroom where a lawyer dramatically produces screenshots of WhatsApp messages that appear devastating to the defence.

Most observers would assume that the messages have already proved the case.

Legally, however, the first question is not what the messages say.

The first question is whether the court can lawfully rely upon them at all.

This is where the law governing electronic evidence becomes crucial.

In modern litigation, one of the most common mistakes is to assume that because a WhatsApp message exists, it automatically becomes admissible in court. Indian evidence law takes a more cautious approach. Before a court evaluates the contents of an electronic record, it must first determine whether the legal requirements governing electronic evidence have been satisfied.

Electronic Evidence: Section 65B of the Evidence Act and Section 63 of the Bharatiya Sakshya Adhiniyam

Electronic records occupy a unique position in evidence law.

Historically, the admissibility of electronic records was governed by Section 65B of the Indian Evidence Act, 1872. Following the enactment of the Bharatiya Sakshya Adhiniyam, 2023 (BSA), the corresponding framework is now principally contained in Section 63, which governs the admissibility of electronic records and digital evidence.

Although the statutory language has been modernised, the underlying principle remains substantially the same: electronic records must satisfy specific legal requirements before they can be relied upon as evidence in court.

This requirement frequently arises in cases involving WhatsApp messages, screenshots, chat exports, emails, audio recordings, video files, social media posts, and forensic extractions obtained from mobile phones or other digital devices.

In many such cases, the material produced before the court constitutes secondary electronic evidence. To establish its authenticity and reliability, the law generally requires compliance with the statutory certification requirements applicable to electronic records.

The certificate is intended to identify:

• the electronic record in question;

• the manner in which it was produced or generated;

• particulars of the device or system involved; and

• confirmation that the relevant device or system was operating properly during the relevant period.

The Supreme Court authoritatively examined this issue in Arjun Panditrao Khotkar v. Kailash Kushanrao Gorantyal^[5], where it held that compliance with the statutory certification requirement is ordinarily mandatory and operates as a condition precedent to admissibility.

Put simply, a WhatsApp screenshot is not automatically evidence merely because it exists.

As a result, the legal inquiry is not limited to whether a WhatsApp message, screenshot, or recording appears genuine. Before a court evaluates the contents of an electronic record, it must first determine whether the statutory requirements governing electronic evidence have been satisfied.

In many cases, therefore, the real dispute is not over what the message says, but whether the electronic record has crossed the legal threshold required to enter the courtroom in the first place.

Absent compliance with the applicable statutory requirements, a court may decline to admit or rely upon the electronic record, regardless of the apparent significance of its contents.

Why WhatsApp Cases Frequently Run Into Trouble

WhatsApp evidence presents unique evidentiary challenges.

Unlike many traditional documents, a WhatsApp conversation ordinarily exists on more than one device. Messages may be available on the sender's phone, the recipient's phone, linked devices, cloud backups, or other storage systems.

This immediately raises several important questions:

• Which device was examined?

• Who extracted the chats?

• Was a forensic image or forensic extraction created?

• Was the extraction process properly documented?

• Has the electronic record been appropriately certified?

• Who issued the certificate, and on what basis?

The reliability, authenticity, and admissibility of electronic evidence often depend upon satisfactory answers to these questions.

Courts have repeatedly emphasised that screenshots, chat exports, and other electronic records cannot be evaluated in isolation from the process by which they were obtained, preserved, and produced before the court.

As a result, disputes involving WhatsApp messages frequently turn not only on the contents of the conversation but also on questions of authenticity, integrity, and compliance with the legal requirements governing electronic evidence.

The lesson is straightforward.

A screenshot does not become evidence merely because it exists.

Before asking what a message proves, a court must first determine whether the electronic record has been brought before it in a manner recognised by law.

Can the Police Question You About WhatsApp Messages?

A separate issue arises during interrogation.

Investigating officers frequently ask suspects to identify phone numbers, explain messages, clarify conversations, or provide context for particular chats discovered during an investigation.

At this stage, Article 20(3) of the Constitution assumes particular importance.

The protection against self-incrimination is not confined to the courtroom. In Nandini Satpathy v. P.L. Dani^[6], the Supreme Court made it clear that the constitutional guarantee extends to the investigation stage as well. A person cannot be compelled to provide answers that may reasonably expose them to criminal liability.

Importantly, compulsion is not limited to physical force. Constitutional concerns may arise wherever statements are obtained through coercion, intimidation, persistent pressure, or other circumstances that undermine the voluntary nature of the response.

This distinction becomes particularly relevant in cases involving digital communications.

There is an important difference between asking a person to identify a phone number, account, or contact and requiring that person to explain the meaning, context, or significance of an allegedly incriminating conversation.

The further investigators move from identification towards compelled explanation, interpretation, or admission, the more likely it is that questions of self-incrimination will arise.

Whether Article 20(3) ultimately applies in a particular case will depend on the facts of the case, the nature of the information sought, and whether the response effectively requires the disclosure of personal knowledge that may assist the prosecution.

For that reason, the constitutional analysis does not end once investigators obtain the chats. Questions may also arise regarding whether a person can be compelled to explain what those chats mean.

The Position Under the Bharatiya Sakshya Adhiniyam, 2023 and Bharatiya Nagarik Suraksha Sanhita, 2023

India's criminal justice framework has undergone significant legislative reform through the enactment of the Bharatiya Nagarik Suraksha Sanhita, 2023 (BNSS)^[13] and the Bharatiya Sakshya Adhiniyam, 2023 (BSA)^[14], which have replaced the Code of Criminal Procedure, 1973^[15] and the Indian Evidence Act, 1872^[16] respectively.

These reforms have modernised the statutory language governing criminal investigations and electronic evidence. However, the transition to the new legislative framework has not fundamentally altered the constitutional principles that govern access to and use of digital information.

The right to privacy recognised under Article 21 continues to apply to searches and seizures involving mobile phones, laptops, and other digital devices. Similarly, the protection against self-incrimination guaranteed by Article 20(3) remains available wherever investigative measures raise concerns regarding compelled disclosure of incriminating personal knowledge.

The law relating to electronic evidence has likewise retained its core structure. Although the relevant provisions are now contained in the Bharatiya Sakshya Adhiniyam, the requirement that electronic records be properly authenticated before being relied upon in court continues to remain central to admissibility.

As a result, the enactment of the BNSS and the BSA should not be understood as creating unrestricted powers to access, search, or rely upon digital material. Investigative powers continue to operate alongside constitutional limitations, procedural safeguards, and evidentiary requirements designed to protect the fairness of the criminal process.

In practical terms, the questions remain much the same: Can the device be lawfully seized? Can access be lawfully obtained? Can the information be lawfully used? And can the resulting electronic evidence be properly admitted before a court?

The new statutes have changed the framework. They have not eliminated the safeguards.

What If You Have Already Unlocked the Phone?

A common misconception is that once a person voluntarily unlocks a device, all legal objections disappear. That assumption is not entirely correct.

Even where a phone has already been unlocked, important legal questions may still remain. Courts may examine whether the seizure itself was lawful, whether the scope of the search exceeded what was reasonably required for the investigation, whether privacy safeguards were respected, and whether the extracted material was properly preserved and certified.

Similarly, unlocking a device does not automatically cure defects relating to the admissibility of electronic evidence. If WhatsApp chats or other electronic records are later produced in court without complying with the requirements of the Bharatiya Sakshya Adhiniyam, 2023, objections regarding admissibility may still remain available.

Nor does voluntary cooperation necessarily amount to a waiver of every constitutional or evidentiary objection that may subsequently arise.

For that reason, a person who has already cooperated with investigators should not assume that every legal challenge has been lost.

When Should an Objection to Electronic Evidence Be Raised?

The timing of objections can significantly affect how disputes relating to electronic evidence are resolved.

Under both the earlier framework of Section 65B of the Indian Evidence Act, 1872 and the present framework under Section 63 of the Bharatiya Sakshya Adhiniyam, 2023, questions relating to certification, authenticity, and admissibility are often examined when the electronic record is formally tendered before the court.

In practical terms, lawyers should scrutinise electronic records at the earliest available opportunity. Questions relating to certification, chain of custody, device authenticity, metadata, and the source of extraction are often easier to address before the evidence becomes deeply embedded in the trial record.

The precise consequences of a delayed objection will depend upon the facts of the case and the nature of the defect alleged. Nevertheless, the timing of objections frequently plays an important role in electronic evidence disputes.

Screenshots vs. Forensic Reports: What Courts Usually Prefer

Many litigants assume that a screenshot and a forensic extraction carry the same evidentiary value.

In practice, they do not.

A screenshot merely captures what appears on a screen at a particular moment. Standing alone, it may reveal little about the source of the message, whether the content was altered, whether portions of the conversation are missing, or whether the record accurately reflects the underlying data.

A properly conducted forensic extraction, by contrast, generally provides significantly greater assurance regarding authenticity, integrity, completeness, and preservation of metadata. For that reason, certified forensic extractions are generally regarded as more reliable than standalone screenshots.

This does not mean that every forensic report is automatically admissible or that every screenshot is necessarily inadmissible. The ultimate question remains whether the statutory requirements governing electronic evidence have been satisfied.

Nevertheless, as a practical matter, certified forensic extractions tend to carry greater evidentiary weight than isolated screenshots produced by a party because they provide a more reliable basis for assessing the authenticity and integrity of the underlying electronic record.

How the Password-Disclosure Dispute Works in Real Life

Court decisions often discuss password disclosure in constitutional terms, but investigations rarely begin with constitutional litigation.

In practice, investigating agencies usually seek cooperation first. An investigating officer may ask an individual to voluntarily unlock a device, provide access to specific chats, or assist in the examination of a phone. Many people comply without obtaining legal advice, often out of concern that refusal may complicate the investigation or be viewed unfavourably.

The legal position, however, is more nuanced.

Whether non-compliance can ultimately result in a judicial direction depends upon the facts of the case, the nature of the investigation, and the legal approach adopted by the court hearing the matter. As discussed earlier, Indian High Courts have not adopted a uniform view on whether disclosure of passwords, passcodes, or biometric credentials can be compelled.

For that reason, the issue is rarely as simple as “you must comply” or “you may refuse.” The answer often depends upon the specific circumstances of the investigation, the statutory framework involved, and the constitutional arguments available in the case.

Practical Lessons From Real Courtrooms

The popular perception is that WhatsApp cases are won or lost because of what the messages say.

In reality, that is often not the case.

Many disputes involving WhatsApp messages turn on questions that arise long before a court evaluates the actual contents of the chats. Courts frequently examine how the messages were obtained, whether the device was lawfully accessed, whether the chain of custody was maintained, whether the extraction process was reliable, and whether the statutory requirements governing electronic evidence have been satisfied.

In many cases, the decisive issue is not the message itself but the process through which the message entered the courtroom.

A chat that appears highly incriminating may nevertheless face significant evidentiary challenges if certification requirements are not met or if questions arise regarding authenticity, integrity, or admissibility. Conversely, a seemingly routine message may become highly persuasive when supported by a proper forensic extraction and a legally compliant evidentiary foundation.

The practical lesson is straightforward: digital evidence cases are rarely decided by screenshots alone. They often turn on questions of authenticity, admissibility, reliability, and procedure.

For lawyers, this means that electronic evidence should be scrutinised with the same care traditionally reserved for confessions, documentary evidence, and forensic reports. For ordinary citizens, it means that the existence of a WhatsApp message is only the beginning of the legal inquiry—not the end of it.

If the Police Ask for Your WhatsApp Chats: Five Things to Remember

1. Do Not Panic

A request for access to a phone does not automatically mean investigators have unrestricted legal authority over everything stored inside it.

2. Understand the Legal Basis for the Request

Where possible, understand the legal basis on which the device is being sought, seized, or examined.

3. Seek Legal Advice Before Sharing Passwords

The law concerning compelled disclosure of passwords, passcodes, and other means of unlocking a device remains unsettled.

4. Verify Compliance With Electronic Evidence Requirements

If chats are later relied upon in court, examine whether the applicable statutory requirements governing electronic evidence have been satisfied.

5. Remember Your Constitutional Rights

Privacy, fair trial rights, and protection against self-incrimination do not disappear simply because an investigation has begun.

Conclusion

The real legal issue is not whether a WhatsApp message exists.

The real issue is whether the State obtained, preserved, authenticated, and presented that message in a manner consistent with constitutional guarantees and the law governing electronic evidence.

A chat that appears highly incriminating may still face serious legal challenges if questions arise regarding the manner in which it was obtained, the legality of access to the device, the authenticity of the record, or compliance with the statutory requirements governing electronic evidence.

In an age where entire criminal investigations can revolve around a smartphone, understanding these distinctions is no longer merely useful. It is essential.

The question is not simply whether the police can read your WhatsApp chats.

In the digital age, the existence of a WhatsApp message is only the beginning of the legal inquiry. What ultimately matters is whether the message was obtained, authenticated, and presented in a manner that the law is prepared to recognise.

The law relating to compelled disclosure of passwords and access credentials continues to evolve, and courts are still grappling with the constitutional balance between effective investigation and individual rights.